Thanks for the tip, I noticed lot of people stuggle to sort this out and not aware of the CTP sample. Even I struggled for a while to sort the clientaccesspolicy issue rather than concentrating on my real business problem.

I just wrote a detailed post about the challenge how the CTP sample helps to tackle this.